
The Latest
Everything published on the site, day by day, newest first: guides, analysis, essays and quick thoughts in one running log. The shelves for browsing are elsewhere; this is where you see what is new.
The log
Entries 21–34 of 34
AI Reviewer Context Isolation: What Actually Contaminates
AI reviewer context isolation starts with the actual request payload. Build a tested allowlist and separate primary evidence from prior verdicts.11 min readAI reviewer context isolationmulti-agent reviewDesign a Cache Experiment That Measures the Right Thing
Prompt caching measurement means separating context size, billed usage and latency instead of reading one counter as proof of all three.11 min readprompt-cachingLLM costDurable Agent Execution: Resume Without Repeating Effects
A checkpoint that saves state is not the same as a receipt from the outside world. Learn what must persist before an actor is replaced.13 min readdurable agent executionidempotencyLLM Business Rule Validation: JSON Parses, Now What?
Check an LLM proposal against trusted stock, prices and budget after its fields validate, with explicit errors for wrong quantities and stale data.13 min readLLM business rule validationPydanticLLM Duplicate Key Validation Before Dictionary Conversion
A dictionary of order lines can hide duplicate rows. Check the list for repeats before conversion, not after, to preserve evidence.11 min readLLM validationdata integrityLLM Model Routing Evaluation From Accepted Work Cases
Evaluate model routes on ordinary tasks, missing data and policy conflicts, then set acceptance thresholds before comparing cost savings.11 min readLLM model routing evaluationagent evaluationMCP Token Audience Validation: A Worked Denial Case
Validate an MCP token for the receiving service as well as its issuer, expiry and scope. Test wrong-audience denial before protected work executes.12 min readmcpauthorizationPydantic Strict Validation: Choosing What an Input May Become
Learn Pydantic strict validation to decide which conversions a quantity field should accept, and which ones deserve a clear rejection.12 min readPydanticdata validationRAG Access Control: Stop Leaks Before the Prompt Builds
RAG access control means filtering by permission before retrieval, not after the answer is written. A worked two-user case shows where checks belong.11 min readRAG access controlretrieval securityScheduled publication timezone: the worked case
Why a date-only release rule needs one clock across build, request and cache before a scheduled publication timezone decision is trustworthy.9 min readschedulingtimezonesStateless MCP Application State: Where Identity Really Lives
Keep MCP job state durable while connections change. Check authenticated identity and job permissions on each protected request before resuming work.10 min readMCPapplication stateUpdatedTranslate a Coding Agent Benchmark Into a Release Decision
A coding agent benchmark evaluation measures one task distribution. Learn to check whether it matches your actual release decision.11 min readevaluation engineeringcoding-agentsWrite an AI Agent Handoff Checklist That Actually Verifies
Learn to write an AI agent handoff checklist that lets a new engineer verify state and evidence instead of trusting a summary.13 min readAI agent handoff checklistagent memoryThat is the first entry in the log.
To browse rather than follow: topics, all articles and all thoughts. To learn in order: courses and the book.













